Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-75682— Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Quick assessment

Affected

Adobe Adobe Connect

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Adobe Connect 存在“在 SQL 命令中对特殊元素的处理不当”（即 SQL 注入）漏洞，可能导致以当前用户权限执行任意代码。低权限攻击者可利用此漏洞执行任意 SQL 命令，从而可能提升权限或控制受害者的账户或会话。利用该漏洞无需用户交互。影响范围已更新。

CVSS 9.9 · Critical EPSS 0.97% · P62 Updated Sep 23, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 4

Vendor	Product	Version Range	Status
Adobe	Adobe Connect	`≤ 12.11`	affected
		`12.11.1, 12.12`	unaffected
Adobe	Adobe Connect Android Mobile App	`≤ 4.4`	affected
		`4.5`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Source: CVE Program / CVE List V5

Vulnerability Description

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Adobe	Adobe Connect	0 ~ 12.11	-
Adobe	Adobe Connect Android Mobile App	0 ~ 4.4	-

II. Public POCs for CVE-2026-75682

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-75682

请登录查看更多情报信息。

Other References for CVE-2026-75682 (1)

🔗 Adobe Security Bulletin Read full article vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-75682

Same Patch Batch · Adobe · 2026-09-22 · 53 CVEs total

CVE-2026-75745	10.0 CRITICAL	Adobe Experience Manager Forms JEE \| Incorrect Authorization (CWE-863)
CVE-2026-89275	10.0 CRITICAL	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (
CVE-2026-84412	10.0 CRITICAL	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (
CVE-2026-75699	10.0 CRITICAL	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (
CVE-2026-73369	10.0 CRITICAL	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (
CVE-2026-75723	10.0 CRITICAL	Adobe Campaign Classic (ACC) \| Incorrect Authorization (CWE-863)
CVE-2026-75721	10.0 CRITICAL	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (
CVE-2026-75703	10.0 CRITICAL	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (
CVE-2026-82010	9.9 CRITICAL	Adobe Campaign Classic (ACC) \| Improper Neutralization of Special Elements used in an SQL
CVE-2026-89276	9.9 CRITICAL	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (
CVE-2026-83660	9.9 CRITICAL	Adobe Campaign Classic (ACC) \| Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-82013	9.9 CRITICAL	Adobe Campaign Classic (ACC) \| Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-82008	9.9 CRITICAL	Adobe Campaign Classic (ACC) \| Improper Input Validation (CWE-20)
CVE-2026-82000	9.6 CRITICAL	Adobe Experience Manager Forms JEE \| Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-82443	9.6 CRITICAL	Adobe Campaign Classic (ACC) \| Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-75686	9.3 CRITICAL	Adobe Connect \| Improper Input Validation (CWE-20)
CVE-2026-75698	9.3 CRITICAL	Adobe Connect \| Cross-site Scripting (Reflected XSS) (CWE-79)
CVE-2026-75684	9.3 CRITICAL	Adobe Connect \| Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75689	9.3 CRITICAL	Adobe Connect \| Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75697	9.3 CRITICAL	Adobe Connect \| Cross-site Scripting (Stored XSS) (CWE-79)

Showing top 20 of 53 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Adobe Connect

Same vendor: Adobe

Same weakness: CWE-89